{"vulnerability": "cve-2026-1708", "sightings": [{"uuid": "bbce0162-cc68-4c42-83ef-85060e63f8f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-1708", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-1708", "content": "", "creation_timestamp": "2026-03-11T07:16:03.000000Z"}, {"uuid": "fe1efb67-d2be-4c03-9561-110b937d0e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17084", "type": "seen", "source": "https://gist.github.com/raeq/347e9e4da0cd6afc9809a1847277dadc", "content": "", "creation_timestamp": "2026-08-29T20:05:35.010119Z"}, {"uuid": "6dc13c7a-2ed9-41a1-832b-67881eb8490e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17087", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt6xfvz76g2p", "content": "CVE-2026-17087 wp-travel-engine (CVSS Score 7.5) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T10:16:12.398164Z"}, {"uuid": "293ac889-5ac7-4616-97fe-f77b5de2b05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17084", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/aaqcktvmgxkqk", "content": "CPython [CVE-2026-17084] StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0", "creation_timestamp": "2026-08-18T16:39:51.978872Z"}, {"uuid": "7a60db17-3d71-4657-ad6b-7d156ead1ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17082", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h37fepis23flc", "content": "CVE-2026-17082 - IBM i is Affected By Multiple Vulnerabilities in the Debug Server\nCVE ID : CVE-2026-17082\n \n Published : Aug. 12, 2026, 7:36 p.m. | 35\u00a0minutes ago\n \n Description : IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privil...", "creation_timestamp": "2026-08-12T20:19:13.741713Z"}, {"uuid": "185b71e9-390e-470a-912c-2b634a262197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17083", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msw2nczgnk2e", "content": "CVE-2026-17083 - i\nIBM i versions 7.6, 7.5, 7.4, and 7.3 have a security issue that could let an attacker remotely access and control your system. This means they could potentially take control of your IBM i server,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ibm #CVE #infosec", "creation_timestamp": "2026-08-12T21:20:04.138748Z"}, {"uuid": "0ee87db6-ea57-4f30-9e01-c90d8a7fe311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17083", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtd6oteiu52u", "content": "\ud83d\udccc CVE-2026-17083 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. https://www.cyberhub.blog/cves/CVE-2026-17083", "creation_timestamp": "2026-08-18T02:37:06.803410Z"}, {"uuid": "d5242a33-1e05-42a2-9ecc-38ba394bec11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17082", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtduia44t32c", "content": "\ud83d\udccc CVE-2026-17082 - IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied p... https://www.cyberhub.blog/cves/CVE-2026-17082", "creation_timestamp": "2026-08-18T09:07:07.152946Z"}, {"uuid": "73eb7a86-f5f1-49f1-9976-ca21e4b44d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17087", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt6psdpf6i22", "content": "\ud83d\udfe0 CVE-2026-17087 - High (7.5)\n\nThe WP Travel Engine \u2013 Tour Booking Plugin \u2013 Tour Operator Software plugin for WordPress is v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-17087/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-16T08:00:00.305340Z"}, {"uuid": "5be40671-22c5-41af-a5b0-e3aa3de6e2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17084", "type": "seen", "source": "https://bsky.app/profile/foursignalsdev.bsky.social/post/3mtylzn75kt2o", "content": "Python's `str.lower()` in IDNA 2003 encoding mismatches Unicode versions, creating CVE-2026-17084 bypass risk. Audit `str.encode('idna')` usage now.", "creation_timestamp": "2026-08-26T15:01:42.951157Z"}, {"uuid": "6a79bdca-fdc6-4e73-8a8b-ed9639ddca24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-17089", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-17089", "content": "", "creation_timestamp": "2026-08-25T08:15:06.266905Z"}, {"uuid": "3b940e08-b7e4-44f2-acab-baacdb52956d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-17084", "type": "seen", "source": "https://gist.github.com/raeq/95b1fc5a314951741461bae554e7d6bf", "content": "\"\"\"Reproduction for raeq/disarm#713 \u2014 CVE-2026-17084 against disarm 0.14.1.\n\nRebuilds CPython's stringprep table B.3 from the fix commit and its parent,\nfinds every code point the two disagree on, and asks which disarm entry points\nmap the input, the pre-fix output and the post-fix output to a single key.\n\nNeeds network (two files from raw.githubusercontent.com) and disarm importable.\nExpected output:\n\n    684\n    fold_case              684/684\n    search_key             684/684\n    catalog_key            684/684\n    canonicalize           7/684\n    canonicalize_strict    7/684\n    strip_obfuscation      7/684\n    normalize_confusables  7/684\n\nCompanion data: cve-2026-17084-b3-delta.json holds the 684 triples this prints\nthe count of, so a reader can check the set without the network round trip.\n\"\"\"\n\nimport ast, urllib.request\nimport disarm\n\nSHA = \"7e109d084d55e7eb25837a5f3b47ef9beee547bc\"\nBASE = \"https://raw.githubusercontent.com/python/cpython/{}/Lib/stringprep.py\"\n\ndef b3(ref):\n    src = urllib.request.urlopen(BASE.format(ref)).read().decode()\n    for node in ast.walk(ast.parse(src)):\n        if isinstance(node, ast.Assign) and any(\n            getattr(t, \"id\", None) == \"b3_exceptions\" for t in node.targets\n        ):\n            return ast.literal_eval(node.value)\n\ndef mapper(table):\n    return lambda ch: table.get(ord(ch), ch.lower())\n\nbuggy, fixed = mapper(b3(SHA + \"^\")), mapper(b3(SHA))\n\ndelta = [\n    (cp, buggy(chr(cp)), fixed(chr(cp)))\n    for cp in range(0x110000)\n    if not 0xD800 <= cp <= 0xDFFF and buggy(chr(cp)) != fixed(chr(cp))\n]\nprint(len(delta))  # 684\n\nfor name in (\"fold_case\", \"search_key\", \"catalog_key\", \"canonicalize\",\n             \"canonicalize_strict\", \"strip_obfuscation\", \"normalize_confusables\"):\n    fn = getattr(disarm, name)\n    ok = sum(1 for cp, b, f in delta if fn(chr(cp)) == fn(b) == fn(f))\n    print(f\"{name:22s} {ok}/{len(delta)}\")\n", "creation_timestamp": "2026-08-29T20:04:44.221187Z"}, {"uuid": "3c3c1b46-5fe4-44fb-bf32-de97338dfb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvrm4ml4d222", "content": "\ud83d\udfe0 CVE-2026-17086 - High (8.8)\n\nThe ShortPixel Image Optimizer \u2013 Optimize Images, Convert WebP & AVIF plugin for WordPress is v...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-17086/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T07:05:07.857801Z"}, {"uuid": "8266d2f2-5e81-4b5e-9c5f-da065e1aa1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17086", "type": "seen", "source": "https://gist.github.com/ichintu/9a770166efbedcb3b1cdb5d53a11b389", "content": "This September 2026 threat intelligence digest highlights critical vulnerabilities, emerging malware, and security research:\n\n\u2022 **Docker macOS Sandbox Escape:** A critical flaw allows guest VM code to bypass isolation and read/modify files anywhere on the host macOS system.\n\u2022 **RatHat Android Malware:** An AI-driven threat attributed to Chinese actors that abuses ADB to maintain persistent shell access even after uninstallation, distributed via smishing and malvertising.\n\u2022 **Web Application Vulnerabilities:** CVE-2026-17086 affects the ShortPixel WordPress plugin (authenticated PHP object injection), while CVE-2026-93456 impacts django-page-cms (CSRF leading to stored XSS).\n\u2022 **Research & Analysis:** Community discussions cover OpenAI security research and clarify that quantum computers do not currently threaten 128-bit symmetric encryption standards.\n\nThe update underscores the need for immediate patching of isolation bypasses and web app flaws, alongside heightened monitoring for persistent mobile malware.", "creation_timestamp": "2026-09-18T08:01:54.885520Z"}, {"uuid": "539f84e2-7aaf-4f79-844b-5bf3044ea9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17089", "type": "seen", "source": "https://t.me/GithubRedTeam/103082", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17089-PoC-pwnVader\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pwnVader\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 22:59:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T23:00:08.000000Z"}, {"uuid": "d3e8adc2-6fd0-4c92-b656-a7e584ab25f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-17089", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103082", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-17089-PoC-pwnVader\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pwnVader\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 22:59:54\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T23:00:08.000000Z"}]}